If you have ever looked at the source code of a Ruby deserialization gadget chain, I bet you've thought "what sorcery is this"?